PT-2025-37083 · Palo Alto Networks · Cortex Xdr Microsoft 365 Defender Pack

Rc · Published 2025-09-10 · Updated 2025-09-19 · CVE-2025-4234

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Low

Base vector

AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack (affected versions not specified)

Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2025-16022

CVE-2025-4234

Affected Products

Cortex Xdr Microsoft 365 Defender Pack

References · 21

• https://security.paloaltonetworks.com/CVE-2025-4234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4234 · Security Note
• https://bdu.fstec.ru/vul/2025-16022 · Security Note
• https://twitter.com/ScureInfosec/status/1969094051229057369 · Twitter Post
• https://twitter.com/ScureInfosec/status/1968730322884772143 · Twitter Post
• https://twitter.com/ScureInfosec/status/1968728834896752883 · Twitter Post
• https://twitter.com/ScureInfosec/status/1969091100540334531 · Twitter Post
• https://twitter.com/ScureInfosec/status/1969091506276270142 · Twitter Post
• https://twitter.com/ScureInfosec/status/1965810830026355105 · Twitter Post
• https://twitter.com/ScureInfosec/status/1968728654336126983 · Twitter Post
• https://twitter.com/ScureInfosec/status/1968732380148990411 · Twitter Post
• https://twitter.com/ScureInfosec/status/1965809566760775979 · Twitter Post
• https://twitter.com/ScureInfosec/status/1965809408950104371 · Twitter Post
• https://t.me/CVEtracker/32402 · Telegram Post
• https://twitter.com/ScureInfosec/status/1965808212055138584 · Twitter Post